Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/30fbfa-9fc4-4b70-82db-96129fbd4823/1/WTixWy8-6HtMyrE3y1D_-EBWqPI.mft
File:                     WTixWy8-6HtMyrE3y1D_-EBWqPI.mft (raw, json)
Hash identifier:          uIUy8AK61o0RUxlm/hiKuegqEtiHBbBLudfmNI8hcj8=
Subject key identifier:   77:8D:04:D1:DA:B0:8C:25:F3:3A:BA:49:A6:E2:60:8B:C3:F7:DC:E7
Authority key identifier: 59:38:B1:5B:2F:3E:E8:7B:4C:CA:B1:37:CB:50:FF:F8:40:56:A8:F2
Certificate issuer:       /CN=5938b15b2f3ee87b4ccab137cb50fff84056a8f2
Certificate serial:       0193259C5F40A255A0F7ADBF95DD142042FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTixWy8-6HtMyrE3y1D_-EBWqPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/30fbfa-9fc4-4b70-82db-96129fbd4823/1/WTixWy8-6HtMyrE3y1D_-EBWqPI.mft
Manifest number:          0FD5
Signing time:             Wed 13 Nov 2024 13:00:25 +0000
Manifest this update:     Wed 13 Nov 2024 13:00:25 +0000
Manifest next update:     Thu 14 Nov 2024 13:00:25 +0000
Files and hashes:         1: WTixWy8-6HtMyrE3y1D_-EBWqPI.crl (hash: EeKLxShIXgenNdMVRUceiCYghFyI9lB2HA4XndOZamY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:25:9c:5f:40:a2:55:a0:f7:ad:bf:95:dd:14:20:42:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5938b15b2f3ee87b4ccab137cb50fff84056a8f2
        Validity
            Not Before: Nov 13 13:00:25 2024 GMT
            Not After : Nov 14 13:00:25 2024 GMT
        Subject: CN=778d04d1dab08c25f33aba49a6e2608bc3f7dce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:12:af:de:ca:f2:6f:1d:90:c8:e5:92:7e:
                    82:3c:70:92:5e:a0:4c:31:51:43:25:13:b4:40:62:
                    e6:47:1c:7e:9a:ba:6c:8a:98:3d:e1:e9:40:3a:bb:
                    10:d1:b0:62:ff:dc:ff:2b:2b:64:a9:81:28:29:e8:
                    14:ed:db:81:41:a9:72:76:0e:ea:cb:bc:1d:5f:e4:
                    df:d7:17:29:e9:52:a9:52:e0:4e:b1:f2:67:94:1d:
                    be:50:be:4a:00:5e:d6:6c:b0:5c:bc:a1:a5:ea:dc:
                    61:9c:f8:4c:df:23:af:8e:02:bd:ad:b3:79:87:72:
                    83:b1:5b:a8:52:a0:bc:84:38:a4:cc:64:f2:f7:e8:
                    85:45:19:cc:4f:43:3e:70:70:90:76:0c:46:73:32:
                    00:54:bb:f3:6e:25:12:98:45:f4:d6:80:f6:ce:98:
                    5b:9f:1c:e7:f4:50:59:22:1c:3f:b0:d8:76:8c:ad:
                    8f:ad:e8:4d:b8:ba:52:fb:c4:5a:3e:5d:87:41:3e:
                    f0:d3:8e:e8:4b:38:2e:f9:f1:b9:62:a6:ae:31:64:
                    e5:fd:82:e5:b3:12:fc:19:29:32:90:60:b0:72:00:
                    3c:18:71:e6:51:6a:35:73:43:e4:27:4f:30:9d:7f:
                    36:ae:e0:e3:56:6a:44:32:20:b9:87:e8:44:60:31:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8D:04:D1:DA:B0:8C:25:F3:3A:BA:49:A6:E2:60:8B:C3:F7:DC:E7
            X509v3 Authority Key Identifier:
                keyid:59:38:B1:5B:2F:3E:E8:7B:4C:CA:B1:37:CB:50:FF:F8:40:56:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTixWy8-6HtMyrE3y1D_-EBWqPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/30fbfa-9fc4-4b70-82db-96129fbd4823/1/WTixWy8-6HtMyrE3y1D_-EBWqPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/30fbfa-9fc4-4b70-82db-96129fbd4823/1/WTixWy8-6HtMyrE3y1D_-EBWqPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:4a:50:9e:d2:d5:74:3c:7f:28:7f:60:66:14:e8:2c:88:
         7c:4e:f8:71:2d:38:f0:f1:8b:bf:a6:32:a2:13:ff:d0:67:67:
         10:5f:9f:79:60:57:30:4b:51:71:b7:c0:87:9e:13:ee:cf:48:
         ea:58:42:f5:d1:04:74:67:38:8f:89:21:79:35:f2:16:d1:29:
         bb:48:b3:63:b6:02:9a:84:3e:82:dd:a1:1f:ce:a9:17:3c:de:
         0a:04:ae:bf:a0:91:3e:7d:69:af:63:50:8a:92:cd:0e:08:86:
         84:c3:9a:5e:77:19:47:15:42:5e:51:5c:7b:bf:6e:e8:74:13:
         d7:bf:52:8b:34:72:cd:f6:08:74:fb:21:03:c2:e1:41:77:23:
         eb:2c:1b:4e:94:d7:53:54:16:52:8c:2e:8d:51:97:12:cb:d6:
         bb:36:eb:b8:27:f2:a9:58:68:d4:46:a5:7d:59:6b:ce:bc:53:
         24:21:18:85:8a:6c:ae:89:f9:9f:76:12:ec:d9:55:f5:83:59:
         97:05:e3:b6:12:34:bb:d4:da:ef:af:e0:d8:d3:66:42:4b:5a:
         a7:db:5f:f3:dc:9f:83:7a:8c:42:53:1a:62:6e:7b:eb:46:34:
         8d:67:93:b5:ca:d7:eb:58:84:f8:72:79:25:17:0b:c4:fc:41:
         3c:c1:d0:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMlnF9AolWg962/ld0UIEL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MzhiMTViMmYzZWU4N2I0Y2NhYjEzN2NiNTBmZmY4NDA1
NmE4ZjIwHhcNMjQxMTEzMTMwMDI1WhcNMjQxMTE0MTMwMDI1WjAzMTEwLwYDVQQD
Eyg3NzhkMDRkMWRhYjA4YzI1ZjMzYWJhNDlhNmUyNjA4YmMzZjdkY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QcSr97K8m8dkMjlkn6CPHCSXqBM
MVFDJRO0QGLmRxx+mrpsipg94elAOrsQ0bBi/9z/KytkqYEoKegU7duBQalydg7q
y7wdX+Tf1xcp6VKpUuBOsfJnlB2+UL5KAF7WbLBcvKGl6txhnPhM3yOvjgK9rbN5
h3KDsVuoUqC8hDikzGTy9+iFRRnMT0M+cHCQdgxGczIAVLvzbiUSmEX01oD2zphb
nxzn9FBZIhw/sNh2jK2PrehNuLpS+8RaPl2HQT7w047oSzgu+fG5YqauMWTl/YLl
sxL8GSkykGCwcgA8GHHmUWo1c0PkJ08wnX82ruDjVmpEMiC5h+hEYDFIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeNBNHasIwl8zq6SabiYIvD99znMB8GA1UdIwQY
MBaAFFk4sVsvPuh7TMqxN8tQ//hAVqjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1RpeFd5OC02SHRNeXJFM3kxRF8tRUJXcVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMGZiZmEtOWZjNC00YjcwLTgyZGIt
OTYxMjlmYmQ0ODIzLzEvV1RpeFd5OC02SHRNeXJFM3kxRF8tRUJXcVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMGZiZmEtOWZjNC00YjcwLTgyZGItOTYxMjlmYmQ0ODIz
LzEvV1RpeFd5OC02SHRNeXJFM3kxRF8tRUJXcVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfNKUJ7S
1XQ8fyh/YGYU6CyIfE74cS048PGLv6YyohP/0GdnEF+feWBXMEtRcbfAh54T7s9I
6lhC9dEEdGc4j4kheTXyFtEpu0izY7YCmoQ+gt2hH86pFzzeCgSuv6CRPn1pr2NQ
ipLNDgiGhMOaXncZRxVCXlFce79u6HQT179SizRyzfYIdPshA8LhQXcj6ywbTpTX
U1QWUowujVGXEsvWuzbruCfyqVho1EalfVlrzrxTJCEYhYpsron5n3YS7NlV9YNZ
lwXjthI0u9Ta76/g2NNmQktap9tf89yfg3qMQlMaYm5760Y0jWeTtcrX61iE+HJ5
JRcLxPxBPMHQjQ==
-----END CERTIFICATE-----